We need to lock when *not* in FIPS mode.

(cherry picked from commit d1671f4f)

Add MULX/AD*X code paths and optimize even original code path.

(cherry picked from commit 667053a2)

(cherry picked from commit 41965a84)

PR: 3176.

In FIPS mode ssleay_rand_bytes is only used for PRNG seeding and is
performed in either a single threaded context (when the PRNG is first
initialised) or under a lock (reseeding). To avoid multiple locks disable
use of CRYPTO_LOCK_RAND in FIPS mode in ssleay_rand_bytes.

PR: 3189
Submitted by: Oscar Ciurana
(cherry picked from commit c5d5f5bd)

(cherry picked from commit 8bd7ca99)

rsaz_exp.c: harmonize line terminating;
asm/rsaz-*.pl: minor optimizations.
asm/rsaz-x86_64.pl: sync from master.
(cherry picked from commit 31ed9a21)

(cherry picked from commit 6efef384)

New functions to retrieve current certificate or private key
from an SSL_CTX.

Constify SSL_get_private_key().
(cherry picked from commit a25f9adc)

(cherry picked from commit 60aeb187)

(cherry picked from commit fdeaf55b)

PR#3106

If pointer comparison for current certificate fails check
to see if a match using X509_cmp succeeds for the current
certificate: this is useful for cases where the certificate
pointer is not available.
(cherry picked from commit 6856b288a6e66edd23907b7fa264f42e05ac9fc7)

PR#3169

This patch, which currently applies successfully against master and
1_0_2, adds the following functions:

SSL_[CTX_]select_current_cert() - set the current certificate without
disturbing the existing structure.

SSL_[CTX_]get0_chain_certs() - get the current certificate's chain.

SSL_[CTX_]clear_chain_certs() - clear the current certificate's chain.

The patch also adds these functions to, and fixes some existing errors
in, SSL_CTX_add1_chain_cert.pod.
(cherry picked from commit 2f56c9c015dbca45379c9a725915b3b8e765a119)

PR#3172
(cherry picked from commit 4f055e34c3598cad00fca097d812fa3e6436d967)

PR: 3165
Submitted by: Daniel Richard G.
(cherry picked from commit 2df9ec01)

PR: 3165

PR: 3165
(cherry picked from commit d1cf23ac)

(cherry picked from commit 16bc45ba)

(cherry picked from commit 08b433540416c5bc9a874ba0343e35ba490c65f1)

(cherry picked from commit 01be36ef70525e81fc358d2e559bdd0a0d9427a5)

(cherry picked from commit 7040d73d22987532faa503630d6616cf2788c975)